The Azure Cyber Security Specialist is responsible for securing cloud-based solutions and ensuring compliance with Department of Defense (DoD) and United States Marine Corps (USMC) cybersecurity requirements. This role supports Authorization to Operate (ATO) processes, implements security controls, develops Risk Management Framework (RMF) documentation, and works closely with engineering teams and cross-functional stakeholders to maintain a secure and compliant cloud environment.

"This position is contingent upon contract award and funding. Applicants selected may be offered but cannot begin work until funding has been confirmed.”

• Lead and support the development, review, and maintenance of USMC and DoD RMF packages, including System Security Plans (SSPs), Security Controls Traceability Matrices (SCTMs), POA&Ms, and continuous monitoring documentation.
• Execute, validate, and document STIGs, SRGs, and other DoD cybersecurity configuration requirements across Azure environments.
• Coordinate and support ATO activities, ensuring all required evidence, artifacts, and controls are properly implemented and updated throughout the system lifecycle.
• Work directly with cloud engineers, architects, and development teams to integrate secure configurations, remediate vulnerabilities, and ensure alignment with cybersecurity policies.
• Manage security posture across Azure services, including identity and access management, network security, logging and monitoring, and incident response processes.
• Conduct security assessments, gap analyses, and risk evaluations to identify and address weaknesses in cloud-based systems.
• Collaborate with multiple stakeholders, including government cybersecurity teams, program managers, system owners, and external partners to ensure compliance and timely delivery of security milestones.
• Monitor evolving DoD and USMC cybersecurity guidance and apply updates to security processes, documentation, and technical controls.
• Provide subject matter expertise on Azure security features, best practices, and architecture design.

• Must possess a Bachelors degree and 2 years of related experience. In lieu of Bachelor's degree, must possess at least 5 years of related experience. 
• Must possess an active Secret clearance with the ability to obtain a Top-Secret clearance. 
• Hands-on experience with USMC or DoD ATO processes, RMF workflows, and compliance documentation.
• Proficiency implementing and validating STIGs, SRGs, and security controls within cloud or hybrid environments.
• Strong understanding of Azure security services, including Azure AD, Defender, Security Center, Key Vault, network security groups, and logging/monitoring tools.
• Experience developing and managing POA&Ms, SSPs, and other RMF artifacts.
• Ability to work closely with engineering teams to interpret technical designs and integrate cybersecurity requirements.
• Demonstrated skill coordinating with multiple stakeholders across technical and non-technical teams.
• Familiarity with vulnerability management tools, secure configuration practices, and cloud infrastructure security.

Desired Qualifications:

• DoD 8570/8140 certifications (e.g., Security+, CISSP, CCSP).
• Microsoft Azure security certifications (e.g., AZ-500, SC-100).
• Experience supporting government cloud environments such as Azure Government or IL4/IL5 workloads.
• Background in incident response or cloud threat detection.
• Experience using eMASS for RMF package creation, updates, artifact management, and ATO coordination.

This position is contingent upon contract award and funding. Applicants selected may be hired offered but cannot begin work until funding has been confirmed.

Work Where it Matters

Five Rivers Analytics (FRA), an Akima company, is not just another federal IT contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.

At FRA, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.

For our shareholders, FRA provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.

For our government customers, FRA delivers streamline operations in support of an increasingly fast-paced, complex, and dynamic digital environment.

As a FRA employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.

• Lead and support the development, review, and maintenance of USMC and DoD RMF packages, including System Security Plans (SSPs), Security Controls Traceability Matrices (SCTMs), POA&Ms, and continuous monitoring documentation.
• Execute, validate, and document STIGs, SRGs, and other DoD cybersecurity configuration requirements across Azure environments.
• Coordinate and support ATO activities, ensuring all required evidence, artifacts, and controls are properly implemented and updated throughout the system lifecycle.
• Work directly with cloud engineers, architects, and development teams to integrate secure configurations, remediate vulnerabilities, and ensure alignment with cybersecurity policies.
• Manage security posture across Azure services, including identity and access management, network security, logging and monitoring, and incident response processes.
• Conduct security assessments, gap analyses, and risk evaluations to identify and address weaknesses in cloud-based systems.
• Collaborate with multiple stakeholders, including government cybersecurity teams, program managers, system owners, and external partners to ensure compliance and timely delivery of security milestones.
• Monitor evolving DoD and USMC cybersecurity guidance and apply updates to security processes, documentation, and technical controls.
• Provide subject matter expertise on Azure security features, best practices, and architecture design.

• Must possess a Bachelors degree and 2 years of related experience. In lieu of Bachelor's degree, must possess at least 5 years of related experience. 
• Must possess an active Secret clearance with the ability to obtain a Top-Secret clearance. 
• Hands-on experience with USMC or DoD ATO processes, RMF workflows, and compliance documentation.
• Proficiency implementing and validating STIGs, SRGs, and security controls within cloud or hybrid environments.
• Strong understanding of Azure security services, including Azure AD, Defender, Security Center, Key Vault, network security groups, and logging/monitoring tools.
• Experience developing and managing POA&Ms, SSPs, and other RMF artifacts.
• Ability to work closely with engineering teams to interpret technical designs and integrate cybersecurity requirements.
• Demonstrated skill coordinating with multiple stakeholders across technical and non-technical teams.
• Familiarity with vulnerability management tools, secure configuration practices, and cloud infrastructure security.

Desired Qualifications:

• DoD 8570/8140 certifications (e.g., Security+, CISSP, CCSP).
• Microsoft Azure security certifications (e.g., AZ-500, SC-100).
• Experience supporting government cloud environments such as Azure Government or IL4/IL5 workloads.
• Background in incident response or cloud threat detection.
• Experience using eMASS for RMF package creation, updates, artifact management, and ATO coordination.

This position is contingent upon contract award and funding. Applicants selected may be hired offered but cannot begin work until funding has been confirmed.